Privacy

MADZ is a digital brand operator based in Colombia. We operate our own products and customer support agents over Meta channels (Messenger, Instagram, WhatsApp) and other third parties. The data controller is Maddy, founder and sole operator.

Controller contact: hola@madz.world.

This policy may change — when we make material modifications we update the “In effect since” date above and, for customers with active conversations, we notify through the original channel.

When a customer contacts us through one of the channels MADZ operates (Messenger, Instagram, WhatsApp), we receive and store:

• Account identifier on the source platform.
• Name and profile picture as publicly displayed on that platform.
• Content of exchanged messages.
• Attachments sent by the customer (payment receipts, product images, etc.) when applicable to the transaction.

We do NOT collect: precise location, phone contacts, browsing history, friend lists, or biometric data.

Cookies — the public site at madz.world does not use advertising or tracking cookies. The internal operational access uses a strictly technical cookie to maintain the authenticated session. There are no third-party analytics.

The legal basis for processing is your consent: by starting a conversation with any of our channels, you authorize us to process your message to respond to you (Art. 9, Colombia Law 1581 of 2012).

We use the data exclusively to operate customer service conversations:

• Respond and provide support to messages.
• Coordinate payments and shipping when applicable to the transaction.
• Prevent spam and service abuse.

We do not sell data. We do not share it with advertising. None of your data trains AI models — neither ours, nor third parties.

Data is processed through specialized providers of cloud infrastructure, database, and language models, all bound by contract to the same protection obligations as MADZ and to the prohibition of using data for their own purposes or training.

International transfer — your data may be processed outside Colombia (primarily United States). The U.S. is not on the list of countries with adequate protection level issued by the Superintendence of Industry and Commerce (Decree 1377 of 2013), so the transfer is based on your informed consent when starting a conversation with us.

We do not transfer data to advertising networks, data brokers, or governments except by binding court order. To request the current list of specific sub-processors, write to hola@madz.world.

While the customer relationship is active, plus a reasonable period afterward for accounting and post-sales service (typically 2 years from the last message). After that period, the history is anonymized or deleted.

If you request early deletion, we process it within 30 days from the request.

MADZ and its products are not directed to persons under 14 years of age. We do not knowingly request or collect personal data from minors under 14.

If you are a parent or legal guardian and discover that a minor in your care contacted us and shared personal data, write to us at hola@madz.world and we will delete the history within 7 days.

You have the right to:

• Access the data we hold about you.
• Correct it if outdated.
• Delete it (“right to be forgotten”).
• Object to processing or revoke your consent at any time.
• Portability — receive your data in a standard format.

To exercise any of these rights, write to hola@madz.world from the email associated with your identity or by providing enough information to identify you. We respond within 15 business days.

Complaints before the SIC — if you believe we are not respecting these rights, you can file a complaint directly with the Superintendence of Industry and Commerce of Colombia ( sic.gov.co) without needing to notify us first.

HTTPS-encrypted traffic, signed authentication for operational access, secrets segregated by environment. We apply industry standard best practices to protect data.

If you detect a vulnerability, report it to hola@madz.world. We respond within 72 hours.